Tag: 2025-12-31

2 Attack Reports | 217 Vulnerabilities

Attack reports

DeedRAT: Unpacking a Modern Backdoor's Playbook

DeedRAT is a sophisticated backdoor associated with the Chinese APT group Salt Typhoon, targeting critical sectors globally. It infiltrates systems through phishing campaigns, utilizing DLL sideloading to evade detection. The malware establishes persistence via registry run keys and service creatio…
backdoor
apt
phishing
dll sideloading
deedrat
2025-12-31
Published: December 31, 2025
Downloadable IOCs: 4

Rogue ScreenConnect: Common Social Engineering Tactics Seen in 2025

In 2025, there was a significant increase in rogue ScreenConnect installations, part of a broader trend of threat actors abusing remote monitoring and management tools (RMMs). These tools were used to gain access, blend in, move laterally, and maintain persistence in target systems. Attackers emplo…
screenconnect
social engineering
remote access
rmm abuse
2025-12-31
lures
Published: December 31, 2025
Downloadable IOCs: 14
Click here to see more Attack Reports

Vulnerabilities

CVE-2020-36904

9.3
    Selea
  • Carplateserver
Published: December 31, 2025

CVE-2021-47744

9.3
    Cypress Solutions
  • Ctm-200
  • Ctm-One
Published: December 31, 2025

CVE-2025-69288

9.1
    Titra
  • Titra
Published: December 31, 2025

CVE-2025-69286

8.9
    Ragflow
  • Rag
Published: December 31, 2025

CVE-2025-15269

8.8
    Fontforge
  • Fontforge
Published: December 31, 2025

CVE-2025-15270

8.8
    Fontforge
  • Fontforge
Published: December 31, 2025

CVE-2025-15271

8.8
    Fontforge
  • Fontforge
Published: December 31, 2025

CVE-2025-15272

8.8
    Fontforge
  • Fontforge
Published: December 31, 2025

CVE-2025-15273

8.8
    Fontforge
  • Fontforge
Published: December 31, 2025

CVE-2025-15274

8.8
    Fontforge
  • Fontforge
Published: December 31, 2025

CVE-2025-15275

8.8
    Fontforge
  • Fontforge
Published: December 31, 2025

CVE-2025-15280

8.8
    Fontforge
  • Fontforge
Published: December 31, 2025

CVE-2025-15387

8.7
    Qno
  • Vpn Firewall
Published: December 31, 2025

CVE-2025-15388

8.7
    Qno Technology
  • Vpn Firewall
Published: December 31, 2025

CVE-2025-15389

8.7
    Qno Technology
  • Vpn Firewall
Published: December 31, 2025

CVE-2021-47726

8.7
    Nucom
  • Wifi Router
Published: December 31, 2025

CVE-2021-47741

8.7
    Zbl
  • Ep On Onu Broadband Router
Published: December 31, 2025

CVE-2015-10145

8.7
    Gargoyle
  • Gargoyle
Published: December 31, 2025

CVE-2021-47745

8.6
    Cypress Solutions
  • Ctm-200
Published: December 31, 2025

CVE-2021-47747

8.6
    Metern
  • Metern
Published: December 31, 2025

CVE-2025-68700

8.6
    Ragflow
  • *
Published: December 31, 2025

CVE-2025-15371

8.5
    Tenda
  • I24
  • 4g03 Pro
  • 4g05
  • 4g08
  • G0-8g-Poe
  • Nova Mw5g
  • Teg5328f
Published: December 31, 2025

CVE-2020-36903

8.5
    Selea
  • Carplateserver
Published: December 31, 2025

CVE-2021-47742

8.5
    Epic Games
  • Rocket League
Published: December 31, 2025

CVE-2025-28949

8.5
    Codedraft
  • Mediabay
Published: December 31, 2025

CVE-2025-30628

8.5
    Aa-Team
  • Amazon Affiliates Addon
Published: December 31, 2025

CVE-2025-34468

8.2
    Libcoap
  • Libcoap
Published: December 31, 2025

CVE-2025-15276

7.8
    Fontforge
  • Fontforge
Published: December 31, 2025

CVE-2025-15277

7.8
    Fontforge
  • Fontforge
Published: December 31, 2025

CVE-2025-15278

7.8
    Fontforge
  • Fontforge
Published: December 31, 2025

CVE-2025-15279

7.8
    Fontforge
  • Fontforge
Published: December 31, 2025

CVE-2025-1977

7.7
    Moxa
  • Nport 6100-G2
  • Nport 6200-G2
Published: December 31, 2025

CVE-2025-49346

7.1
    Peter Sterling
  • Simple Archive Generator
Published: December 31, 2025

CVE-2025-59137

7.1
    Eleopard
  • Behance Portfolio Manager
Published: December 31, 2025

CVE-2025-49342

7.1
    Wolfgang Häfelinger
  • Custom Style
Published: December 31, 2025

CVE-2025-49343

7.1
    Socialprofilr
  • Social Profilr
Published: December 31, 2025

CVE-2025-49344

7.1
    Rene Ade
  • Sensitivetagcloud
Published: December 31, 2025

CVE-2025-49345

7.1
    Wp
  • Easyarchives
Published: December 31, 2025

CVE-2025-49353

7.1
    Marcin Kijak
  • Noindex By Path
Published: December 31, 2025

CVE-2025-49354

7.1
    Mindstien Technologies
  • Recent Posts From Each Category
Published: December 31, 2025

CVE-2025-68885

7.1
    Page Carbajal
  • Custom Post Status
Published: December 31, 2025

CVE-2025-2026

7.1
    Moxa
  • Nport 6100-G2
  • Nport 6200-G2
Published: December 31, 2025

CVE-2025-49028

7.1
    Zoho
  • Zeptomail
Published: December 31, 2025

CVE-2025-23608

7.1
    Omar Mohamed Mohamoud
  • Live Tv
Published: December 31, 2025

CVE-2025-23667

7.1
    Christopher Churchill
  • Custom-Post-Edit
Published: December 31, 2025

CVE-2025-23705

7.1
    Zielke
  • Zielke Design Project Gallery
Published: December 31, 2025

CVE-2025-23707

7.1
    Matamko
  • En Masse
Published: December 31, 2025

CVE-2025-23719

7.1
    Zckevin
  • Zhinatwitterwidget
Published: December 31, 2025

CVE-2025-23757

7.1
    Proloy Chakroborty
  • Zd Scribd Ipaper
Published: December 31, 2025

CVE-2025-31054

7.1
    Themefy
  • Bloggie
Published: December 31, 2025

CVE-2025-47566

7.1
    Zoomsounds
  • Zoomsounds
Published: December 31, 2025

CVE-2025-50053

7.1
    Nebelhorn
  • Blappsta Mobile App Plugin
  • Blappsta Mobile App
Published: December 31, 2025

CVE-2025-52739

7.1
    Uxper
  • Sala
Published: December 31, 2025

CVE-2025-53235

7.1
    Osuthorpe
  • Easy Social
Published: December 31, 2025

CVE-2023-7332

7.1
    Pocketmine
  • Pocketmine-Mp
Published: December 31, 2025

CVE-2025-15017

7.0
    Moxa
  • Serial Device Server
Published: December 31, 2025

CVE-2021-47740

6.9
    Kztech
  • Jt3500v
Published: December 31, 2025

CVE-2025-34469

6.9
    Cowrie
  • Cowrie
Published: December 31, 2025

CVE-2025-62136

6.5
    Thinkupthemes
  • Melos
Published: December 31, 2025

CVE-2025-62137

6.5
    Shuttlethemes
  • Shuttle
Published: December 31, 2025

CVE-2025-62146

6.5
    Maksym Marko
  • Mx Time Zone Clocks
Published: December 31, 2025

CVE-2025-62758

6.5
    Funnelforms
  • Funnelforms Free
Published: December 31, 2025

CVE-2025-62759

6.5
    Justin Tadlock
  • Series
Published: December 31, 2025

CVE-2025-62760

6.5
    Buddydev
  • Buddypress Activity Shortcode
Published: December 31, 2025

CVE-2025-62761

6.5
    Basepress
  • Knowledge Base Documentation And Wiki Plugin
Published: December 31, 2025

CVE-2025-62992

6.5
    Everest
  • Everest Backup
Published: December 31, 2025

CVE-2025-63000

6.5
    Wp For Church
  • Sermon Manager
Published: December 31, 2025

CVE-2025-63005

6.5
    Wordpress
  • Tooltips
Published: December 31, 2025

CVE-2025-49358

6.5
    Ruhul Amin
  • Content Fetcher
Published: December 31, 2025

CVE-2025-62135

6.5
    Landwire
  • Responsive Block Control
Published: December 31, 2025

CVE-2025-62748

6.5
    Genetech
  • Web And Woocommerce Addons For Wpbakery Builder
Published: December 31, 2025

CVE-2025-62749

6.5
    Bainternet
  • User Specific Content
Published: December 31, 2025

CVE-2025-62752

6.5
    Kalender.Digital
  • Calendar.Online
Published: December 31, 2025

CVE-2025-62756

6.5
    Lvaudore
  • The Moneytizer
Published: December 31, 2025

CVE-2025-62757

6.5
    Webman
  • Webman Amplifier
Published: December 31, 2025

CVE-2025-62991

6.5
    Thinkupthemes
  • Minamaze
Published: December 31, 2025

CVE-2025-63032

6.5
    Thinkupthemes
  • Consulting
Published: December 31, 2025

CVE-2025-49357

6.5
    Audiomack
  • Audiomack
Published: December 31, 2025

CVE-2025-62111

6.5
    Webvitaly
  • Extra Shortcodes
Published: December 31, 2025

CVE-2025-62118

6.5
    Kcseopro
  • Adwords Conversion Tracking Code
Published: December 31, 2025

CVE-2025-62125

6.5
    Anshul Gangrade
  • Custom Background Changer
Published: December 31, 2025

CVE-2025-62742

6.5
    *
  • Curator.Io
Published: December 31, 2025

CVE-2025-62743

6.5
    Zookatron
  • Mybooktable Bookstore
Published: December 31, 2025

CVE-2025-62744

6.5
    Chris Steman
  • Page Title Splitter
Published: December 31, 2025

CVE-2025-62990

6.5
    Livemesh
  • Livemesh Addons For Beaver Builder
Published: December 31, 2025

CVE-2025-62095

6.5
    Neilgee
  • Bootstrap Modals
Published: December 31, 2025

CVE-2025-62096

6.5
    Wpfactory
  • Maximum Products Per User For Woocommerce
Published: December 31, 2025

CVE-2025-62097

6.5
    Seothemes
  • Seo Slider
Published: December 31, 2025

CVE-2025-63020

6.5
    Wayne Allen
  • Postie
Published: December 31, 2025

CVE-2025-63021

6.5
    Codetipi
  • Valenti Engine
Published: December 31, 2025

CVE-2025-28973

6.5
    Aa-Team
  • Pro Bulk Watermark Plugin
Published: December 31, 2025

CVE-2025-15398

6.3
    Uasoft
  • Badaso
Published: December 31, 2025

CVE-2025-67703

6.1
    Esri
  • Arcgis Server
Published: December 31, 2025

CVE-2025-67704

6.1
    Esri
  • Arcgis Server
Published: December 31, 2025

CVE-2025-67705

6.1
    Esri
  • Arcgis Server
Published: December 31, 2025

CVE-2025-67708

6.1
    Esri
  • Arcgis Server
Published: December 31, 2025

CVE-2025-67709

6.1
    Esri
  • Arcgis Server
Published: December 31, 2025

CVE-2025-67710

6.1
    Esri
  • Arcgis Server
Published: December 31, 2025

CVE-2025-67711

6.1
    Esri
  • Arcgis Server
Published: December 31, 2025

CVE-2025-62119

5.9
    Viitorcloud
  • Featured Image Custom Link
Published: December 31, 2025

CVE-2025-62121

5.9
    Imran Emu
  • Logo Slider
  • Logo Carousel
  • Logo Showcase
  • Client Logo
Published: December 31, 2025

CVE-2025-62124

5.9
    Soli
  • Wp Post Signature
Published: December 31, 2025

CVE-2025-62140

5.9
    Plainware
  • Locatoraid Store Locator
Published: December 31, 2025

CVE-2025-62142

5.9
    Cincopa
  • Cincopa Video And Media Plugin
Published: December 31, 2025

CVE-2025-62149

5.9
    Saifumak
  • Add Custom Codes
Published: December 31, 2025

CVE-2025-62750

5.9
    Filipe Seabra
  • Woocommerce Parcelas
Published: December 31, 2025

CVE-2025-49337

5.9
    Janhenckens
  • Dashboard Beacon
Published: December 31, 2025

CVE-2025-49355

5.9
    Ikaes
  • Accessibility Press
Published: December 31, 2025

CVE-2025-59135

5.9
    Eleopard
  • Behance Portfolio Manager
Published: December 31, 2025

CVE-2025-62989

5.9
    Boxy Studio
  • Cooked
Published: December 31, 2025

CVE-2025-59003

5.8
    Inkthemescom
  • Black Rider
Published: December 31, 2025

CVE-2025-67706

5.6
    Esri
  • Arcgis Server
Published: December 31, 2025

CVE-2025-67707

5.6
    Esri
  • Arcgis Server
Published: December 31, 2025

CVE-2025-68131

5.5
    Cbor2
  • Cbor2
Published: December 31, 2025

CVE-2025-62117

5.4
    Jayce53
  • Easyindex
Published: December 31, 2025

CVE-2025-62120

5.4
    Rick Beckman
  • Openhook
Published: December 31, 2025

CVE-2025-62134

5.4
    A Wp Life
  • Contact Form Widget
Published: December 31, 2025

CVE-2025-62144

5.4
    Kaludi
  • Core Web Vitals And Pagespeed Booster
Published: December 31, 2025

CVE-2025-62091

5.4
    Vollstart
  • Serial Codes Generator And Validator
Published: December 31, 2025

CVE-2025-62098

5.4
    Totalsoft
  • Portfolio Gallery
Published: December 31, 2025

CVE-2025-62108

5.4
    Saifumak
  • Add Custom Codes
Published: December 31, 2025

CVE-2025-62888

5.4
    Marco Milesi
  • Wp Attachments
Published: December 31, 2025

CVE-2025-62088

5.4
    Extendons
  • Wordpress & Woocommerce Scraper Plugin
Published: December 31, 2025

CVE-2025-66154

5.4
    Merkulove
  • Couponer For Elementor
Published: December 31, 2025

CVE-2025-66155

5.4
    Merkulove
  • Questionar For Elementor
Published: December 31, 2025

CVE-2025-66156

5.4
    Merkulove
  • Watcher For Elementor
Published: December 31, 2025

CVE-2025-66157

5.4
    Merkulove
  • Slider For Elementor
Published: December 31, 2025

CVE-2025-66158

5.4
    Merkurlove
  • Gmaper For Elementor
Published: December 31, 2025

CVE-2025-66159

5.4
    Merkulove
  • Walker For Elementor
Published: December 31, 2025

CVE-2025-66160

5.4
    Merkulove
  • Select Graphist For Elementor
Published: December 31, 2025

CVE-2025-66149

5.4
    Merkulove
  • Ungrabber
Published: December 31, 2025

CVE-2025-66150

5.4
    Merkulove
  • Appender
Published: December 31, 2025

CVE-2025-66151

5.4
    Merkulove
  • Countdowner For Elementor
Published: December 31, 2025

CVE-2025-66152

5.4
    Merkulove
  • Criptopayer For Elementor
Published: December 31, 2025

CVE-2025-66153

5.4
    Merkulove
  • Headinger For Elementor
Published: December 31, 2025

CVE-2025-66144

5.4
    Merkulove
  • Worker For Elementor
Published: December 31, 2025

CVE-2025-66145

5.4
    Merkulove
  • Worker For Wpbakery
Published: December 31, 2025

CVE-2025-66146

5.4
    Merkulove
  • Logger For Elementor
Published: December 31, 2025

CVE-2025-66148

5.4
    Merkulove
  • Conformer For Elementor
Published: December 31, 2025

CVE-2025-15223

5.3
    Philipinho
  • Simple-Php-Blog
Published: December 31, 2025

CVE-2025-15373

5.3
    Eyoucms
  • Eyoucms
Published: December 31, 2025

CVE-2025-15375

5.3
    Eyoucms
  • Eyoucms
Published: December 31, 2025

CVE-2025-62138

5.3
    Cedcommerce
  • Wp Advanced Pdf
Published: December 31, 2025

CVE-2025-49349

5.3
    Reuters
  • Reuters Direct
Published: December 31, 2025

CVE-2025-62081

5.3
    Channelize.Io
  • Live Shopping For Woocommerce
    Woocommerce
Published: December 31, 2025

CVE-2025-62139

5.3
    Vladimir Statsenko
  • Terms Descriptions
Published: December 31, 2025

CVE-2025-62141

5.3
    101gen
  • Wawp
Published: December 31, 2025

CVE-2025-62145

5.3
    Newclarity
  • Dmca Protection Badge
Published: December 31, 2025

CVE-2025-62147

5.3
    Nik Melnik
  • Realbig
Published: December 31, 2025

CVE-2025-63001

5.3
    Nicdark
  • Hotel Booking
Published: December 31, 2025

CVE-2025-63016

5.3
    Quadlayers
  • Quadlayers Tiktok Feed
Published: December 31, 2025

CVE-2025-63022

5.3
    Illia
  • Simple Like Page
Published: December 31, 2025

CVE-2025-63031

5.3
    Wordpress
  • Grids Easystest
Published: December 31, 2025

CVE-2025-63053

5.3
    Jewel Theme
  • Master Addons For Elementor
Published: December 31, 2025

CVE-2025-15390

5.3
    Phpgurukul
  • Small Crm
Published: December 31, 2025

CVE-2025-49334

5.3
    Eduardo Villa
  • Myd Delivery
Published: December 31, 2025

CVE-2025-49338

5.3
    Flowbox
  • Flowbox
Published: December 31, 2025

CVE-2025-59136

5.3
    Gerencianet
  • Gerencianet Oficial
Published: December 31, 2025

CVE-2025-62079

5.3
    Damian
  • Wp Export Categories And Taxonomies
Published: December 31, 2025

CVE-2025-62092

5.3
    Wiremo
  • Wiremo
Published: December 31, 2025

CVE-2025-62114

5.3
    Marcelo Torres
  • Download Media Library
Published: December 31, 2025

CVE-2025-62116

5.3
    Quadlayers
  • Ai Copilot
Published: December 31, 2025

CVE-2025-62122

5.3
    Solwininfotech
  • Trash Duplicate And 301 Redirect
Published: December 31, 2025

CVE-2025-62126

5.3
    Razvan Stanga
  • Varnish Nginx Proxy Caching
Published: December 31, 2025

CVE-2025-62129

5.3
    Magnigenie
  • Restropress
Published: December 31, 2025

CVE-2025-62747

5.3
    Aum Watcharapon
  • Featured Image Generator
Published: December 31, 2025

CVE-2025-62755

5.3
    Envato
  • Gs Portfolio
Published: December 31, 2025

CVE-2025-15391

5.3
    D-Link
  • Dir-806a
Published: December 31, 2025

CVE-2025-15392

5.3
    Kohana
  • Kodicms
Published: December 31, 2025

CVE-2025-15393

5.3
    Kohana
  • Kodicms
Published: December 31, 2025

CVE-2025-34467

5.3
    Zwii
  • Zwii Cms
Published: December 31, 2025

CVE-2025-15374

5.1
    Eyoucms
  • Eyoucms
Published: December 31, 2025

CVE-2019-25262

5.1
    Elinicksic
  • Razgover
  • Chat Message Handler
Published: December 31, 2025

CVE-2021-47743

5.1
    Commax
  • Biometric Access Control System
Published: December 31, 2025

CVE-2025-15394

5.1
    Icms
  • Icms
Published: December 31, 2025

CVE-2023-7331

5.1
    Pkristian
  • Full-Stack-Bank
Published: December 31, 2025

CVE-2025-59138

4.9
    Jthemes
  • Genemy
Published: December 31, 2025

CVE-2025-15372

4.8
    Youlaitech
  • Vue3-Element-Admin
Published: December 31, 2025

CVE-2021-47725

4.8
    Stvs
  • Provision
Published: December 31, 2025

CVE-2025-69277

4.5
    Libsodium
  • Libsodium
Published: December 31, 2025

CVE-2025-14783

4.3
    Wordpress
  • Easy Digital Downloads
Published: December 31, 2025

CVE-2025-49356

4.3
    Mykola Lukin
  • Orders Chat For Woocommerce
Published: December 31, 2025

CVE-2025-59130

4.3
    Appointify
  • Appointify
Published: December 31, 2025

CVE-2025-62080

4.3
    Channelize.Io
  • Live Shopping And Shoppable Videos For Woocommerce
Published: December 31, 2025

CVE-2025-62084

4.3
    Imdad Next Web
  • Inext Woo Pincode Checker
Published: December 31, 2025

CVE-2025-62087

4.3
    Wordpress
  • Sticky Notes For Wp Dashboard
Published: December 31, 2025

CVE-2025-62089

4.3
    Mergado
  • Mergado Pack
Published: December 31, 2025

CVE-2025-62130

4.3
    Wpdiscover
  • Accordion Slider Gallery
Published: December 31, 2025

CVE-2025-62131

4.3
    Strategy11
  • Tasty Recipes Lite
Published: December 31, 2025

CVE-2025-62132

4.3
    Strategy11
  • Tasty Recipes Lite
Published: December 31, 2025

CVE-2025-62133

4.3
    Manidoraisamy
  • Formfacade
Published: December 31, 2025

CVE-2025-62143

4.3
    Nicashmu
  • Post Video Players
Published: December 31, 2025

CVE-2025-62148

4.3
    Eugen Bobrowski
  • Robots.Txt Rewrite
Published: December 31, 2025

CVE-2025-62150

4.3
    Themesawesome
  • History Timeline
Published: December 31, 2025

CVE-2025-62154

4.3
    Recorp
  • Ai Content Writing Assistant
Published: December 31, 2025

CVE-2025-62751

4.3
    Extend Themes
  • Vireo
Published: December 31, 2025

CVE-2025-63004

4.3
    Skynet Technologies Usa Llc
  • All In One Accessibility
Published: December 31, 2025

CVE-2025-63014

4.3
    Serhii Pasyuk
  • Gmedia Photo Gallery
Published: December 31, 2025

CVE-2025-63040

4.3
    Saad Iqbal
  • Post Snippets
Published: December 31, 2025

CVE-2025-49339

4.3
    Digages
  • Direct Payments Wp
Published: December 31, 2025

CVE-2025-49340

4.3
    Digages
  • Direct Payments Wp
Published: December 31, 2025

CVE-2025-49352

4.3
    Yoohw Studio
  • Order Cancellation Returns For Woocommerce
Published: December 31, 2025

CVE-2025-62078

4.3
    Fahad Mahmood
  • Easy Upload Files During Checkout
Published: December 31, 2025

CVE-2025-62083

4.3
    Boomdevs
  • Wordpress Coming Soon Plugin
Published: December 31, 2025

CVE-2025-62099

4.3
    Approveme
  • Signature Add On
Published: December 31, 2025

CVE-2025-62101

4.3
    Omid Shamloo Pardakht Delkhah
  • Pardakht Delkhah
Published: December 31, 2025

CVE-2025-62113

4.3
    Emendo Seb
  • Co-Marquage Service-Public.Fr
Published: December 31, 2025

CVE-2025-62115

4.3
    Themeboy
  • Hide Plugins
Published: December 31, 2025

CVE-2025-62123

4.3
    Ink Themes
  • Wp Gmail Smtp
Published: December 31, 2025

CVE-2025-62874

4.3
    Alexander
  • Anycomment
Published: December 31, 2025

CVE-2025-63038

4.3
    Northern Beaches
  • Web Custom Admin Interface
Published: December 31, 2025

CVE-2025-11961

1.9
    Tcpdump
  • Libpcap
Published: December 31, 2025

CVE-2025-11964

1.9
    Tcpdump
  • Libpcap
Published: December 31, 2025

CVE-2025-13029

None
    Knowband
  • Mobile App Builder
Published: December 31, 2025

CVE-2025-14434

None
    Ultimatepostkit
  • Addons For Elementor
Published: December 31, 2025

CVE-2025-61037

None
    Sevencs
  • Orca G2
Published: December 31, 2025

CVE-2025-64699

None
    Seven Cs
  • Orca G2
Published: December 31, 2025
Click here to see more Vulnerabilities